Dubai Board of Directors’ Decision No. 6 of 2026 Upon approval Information Security System

Chairman of the Board of Directors

- Having reviewed Dubai Law No. 15 of 2024 concerning the Dubai Cyber Security Centre, hereinafter referred to as “the Centre”,

- Pursuant to Dubai Decree No. 62 of 2024 establishing the Board of Directors of the Dubai Cyber Security Centre,

and based on the proposal put forward by the Centre’s Chief Executive Officer and the Board of Directors’ approval thereof,

have decided the following:

Article 1 - Adoption of the system

a. The ‘Information Security Policy – Version 3.1’, as set out in the Annex, is hereby adopted, together with the controls, rules and standards it contains.

b. The Centre shall publish the regulations adopted pursuant to Paragraph (a) of this Article on the Centre’s website.

Article 2 - Scope of Application

The system referred to in Article 1 of this Decision shall apply to all vital government entities and non-governmental bodies covered by the provisions of Dubai Law No. 15 of 2024, as referred to herein.

Article 3 - Reviewing and updating the system

The Centre shall periodically review the system referred to in Article 1 of this Dec...